DNSSEC Analyzer - dnscrypt.pl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-05-21 14:39:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for dnscrypt.pl

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 39768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to d.root-servers.net for dnscrypt.pl/A
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for dnscrypt.pl/A: 'IPv6 transport disabled'
	Received 895 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (895 bytes) ;; HEADER SECTION ;; id = 64842 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS c-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS e-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS g-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS i-dns.pl. pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . j8Hvqla7GvV96+Fs8G1PWHMSAKKHCLx5jqw9Q59mlRoaYLaGiV0uuW3p5IACRs6RZvJQJRI0LP8M TFBAvvqk8pSN6EabcyoHEoRSG49FFGjC0acyXPyeMZJZICAJbtFNsZQkimyMHE9UcRjgwQ/i+PpS Sn/MItzEjKuec9PqB5+nk1GbUc+mIxuOSl/FcHQcQWyhPnu36WKavGVvzVj5ZQjEdi4bDjskCEZ6 sParJYMX5iFor3NK+eV7hEiHk6hlkZxh/nAHc5XPUWbrMNl0uiSt/jbBJGVFcAOPcJCSKJe76hEY BvJPACNfRSBz7UTa1nVbSzAZQpDge9VboY2VXg== ) ;; ADDITIONAL SECTION (17 records) a-dns.pl. 172800 IN A 194.181.87.156 b-dns.pl. 172800 IN A 192.195.72.53 c-dns.pl. 172800 IN A 93.190.128.146 d-dns.pl. 172800 IN A 81.15.133.186 e-dns.pl. 172800 IN A 46.28.245.82 f-dns.pl. 172800 IN A 77.79.212.238 g-dns.pl. 172800 IN A 149.156.1.252 h-dns.pl. 172800 IN A 194.0.1.2 i-dns.pl. 172800 IN A 156.154.100.15 a-dns.pl. 172800 IN AAAA 2001:a10:121:1::156 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 c-dns.pl. 172800 IN AAAA 2a02:38:14::146 d-dns.pl. 172800 IN AAAA 2a00:4120:8000:2::186 f-dns.pl. 172800 IN AAAA 2001:1a68:0:17::238 g-dns.pl. 172800 IN AAAA 2001:6d8:1001:1::252 h-dns.pl. 172800 IN AAAA 2001:678:4::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to d.root-servers.net for pl/DNSKEY
	Received 886 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (886 bytes) ;; HEADER SECTION ;; id = 2445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS c-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS e-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS g-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS i-dns.pl. pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . j8Hvqla7GvV96+Fs8G1PWHMSAKKHCLx5jqw9Q59mlRoaYLaGiV0uuW3p5IACRs6RZvJQJRI0LP8M TFBAvvqk8pSN6EabcyoHEoRSG49FFGjC0acyXPyeMZJZICAJbtFNsZQkimyMHE9UcRjgwQ/i+PpS Sn/MItzEjKuec9PqB5+nk1GbUc+mIxuOSl/FcHQcQWyhPnu36WKavGVvzVj5ZQjEdi4bDjskCEZ6 sParJYMX5iFor3NK+eV7hEiHk6hlkZxh/nAHc5XPUWbrMNl0uiSt/jbBJGVFcAOPcJCSKJe76hEY BvJPACNfRSBz7UTa1nVbSzAZQpDge9VboY2VXg== ) ;; ADDITIONAL SECTION (17 records) a-dns.pl. 172800 IN A 194.181.87.156 b-dns.pl. 172800 IN A 192.195.72.53 c-dns.pl. 172800 IN A 93.190.128.146 d-dns.pl. 172800 IN A 81.15.133.186 e-dns.pl. 172800 IN A 46.28.245.82 f-dns.pl. 172800 IN A 77.79.212.238 g-dns.pl. 172800 IN A 149.156.1.252 h-dns.pl. 172800 IN A 194.0.1.2 i-dns.pl. 172800 IN A 156.154.100.15 a-dns.pl. 172800 IN AAAA 2001:a10:121:1::156 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 c-dns.pl. 172800 IN AAAA 2a02:38:14::146 d-dns.pl. 172800 IN AAAA 2a00:4120:8000:2::186 f-dns.pl. 172800 IN AAAA 2001:1a68:0:17::238 g-dns.pl. 172800 IN AAAA 2001:6d8:1001:1::252 h-dns.pl. 172800 IN AAAA 2001:678:4::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone pl

	Checking DS between . and pl
	Query to d.root-servers.net for pl/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for pl/DS: 'IPv6 transport disabled'
	Received 366 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (366 bytes) ;; HEADER SECTION ;; id = 56875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DS ;; ANSWER SECTION (2 records) pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 ) pl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . j8Hvqla7GvV96+Fs8G1PWHMSAKKHCLx5jqw9Q59mlRoaYLaGiV0uuW3p5IACRs6RZvJQJRI0LP8M TFBAvvqk8pSN6EabcyoHEoRSG49FFGjC0acyXPyeMZJZICAJbtFNsZQkimyMHE9UcRjgwQ/i+PpS Sn/MItzEjKuec9PqB5+nk1GbUc+mIxuOSl/FcHQcQWyhPnu36WKavGVvzVj5ZQjEdi4bDjskCEZ6 sParJYMX5iFor3NK+eV7hEiHk6hlkZxh/nAHc5XPUWbrMNl0uiSt/jbBJGVFcAOPcJCSKJe76hEY BvJPACNfRSBz7UTa1nVbSzAZQpDge9VboY2VXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for pl in the . zone
	DS=25412/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pl. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . j8Hvqla7GvV96+Fs8G1PWHMSAKKHCLx5jqw9Q59mlRoaYLaGiV0uuW3p5IACRs6RZvJQJRI0LP8M TFBAvvqk8pSN6EabcyoHEoRSG49FFGjC0acyXPyeMZJZICAJbtFNsZQkimyMHE9UcRjgwQ/i+PpS Sn/MItzEjKuec9PqB5+nk1GbUc+mIxuOSl/FcHQcQWyhPnu36WKavGVvzVj5ZQjEdi4bDjskCEZ6 sParJYMX5iFor3NK+eV7hEiHk6hlkZxh/nAHc5XPUWbrMNl0uiSt/jbBJGVFcAOPcJCSKJe76hEY BvJPACNfRSBz7UTa1nVbSzAZQpDge9VboY2VXg== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=25412/SHA-256 is now in the chain-of-trust
	`pl. 86400 IN DS ( 25412 8 2 40fa53cb1daff433b7a8d45a05a624ecff4a3bd1c8f1469b008a2e0b9f721a49 )`
	Query to g-dns.pl for pl/DNSKEY
	Error querying g-dns.pl/2001:6d8:1001:1:0:0:0:252 for pl/DNSKEY: 'IPv6 transport disabled'
	Received 1055 bytes from 149.156.1.252
	;; Answer received from 149.156.1.252 (1055 bytes) ;; HEADER SECTION ;; id = 42728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (5 records) pl. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4pYZ/A70iVDj4A6YN/FBMF+zT0sn88Sf3j0yP6mrQEMuejxwhp8QFW46qukeOqTv2lAcc7 f4QXQAvqU4KQkjv7Y2P+u7UVc9SIT9f02gIuLXHLYzyMORLsiWqT/761UZVTkOVP8UCWCtzqALQ2 v+u3MfnoO/zszU1YJnqhrG0l ) ; Key ID = 44893 pl. 3600 IN DNSKEY ( 256 3 8 AwEAAeLSzetSIY7jdaHJZZhLP9B9D4wGhoTWFQTanDQAIqyeubgprEgU9+dGNcOFbBVMJe191Y4j p9fOvV9KHMpbjNfARZ4ZLGqRXvEUyWWelqbKNAIpQch7gf6aidgWZiYyy8hkAYcoimmdeSr3g1pS mfSbXV9C2wEQUA8WjtLoqzZJ ) ; Key ID = 39205 pl. 3600 IN DNSKEY ( 257 3 8 AwEAAYakPOFjg+Kxc77WCi7o+BkzZvBqEunzXdJwwRg0By4dt5XDwioocQpTJo2hRaqfp5Ee6NjG iQ2nB8y7CY2IW/8Chuz1jZaD/rd6LXwUwmdGkFX3Te+cY40OI1k1/T06IK9IV9Lc9WwosMEwig0U 5JGGGdzSotD3d3zvouuRVAbS2Tyq6bW6UqyM5Lc2km5YSKsEFlOKZjGJnTpckD0xHO9Y0DNkvvrl hX2C7QXG3W7H4ffS4kJjT3RRcMOpM2AcwsG1JQx/aOnZSx8dvWyEgw5WBP4WWm4ihuAT7U6d301O CVppPvbZwjKpXKo6Q3yjmDLWwJL9ovTz5SJGXN9mpBs= ) ; Key ID = 25412 pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190619120000 20190520120000 25412 pl. hWQ34kMHY9VYH8mXCQ0j+yn981THeNyc4iaOleBgudlja9+0hVyDhHlS/m44Q4EJCxJSgZqiltgZ s2LTZcj4pym4n+sGVKZ5IO12TS+dwsl5o7vjNKHzbhT5JqZefjAjg9rYUPlH5OnH2igdIo783TZD RZpzQMQcxOD52zHtvCzJs9KwBnn4Zhr0rSuhFPEK9MmEEWgQv68KaWPglwoTa2AaKosabDgPlh/X npQ6uLJJH2UiV6LC/cer8LOSzWEAz1gKmYB9xP0lHo1lp/u3Wf7Gm1CUfKq7tboRpmKxoMKbK9bI k96IGldIZNrwe8+UBfYwe2gO6u4oYyNY5QimtQ== ) pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190619120000 20190520120000 39205 pl. ZZqcaw62W+PGw77UD5cntCKR/rsRFO/4wqhB2hv13WG9UemBcbOWQ1cTg1YXzxIrHOeG3Pw94U4C HRmYPn+AXWjEXwVY3MrgvjpskGwT0slLOVOFDYgyrcqYxtURAh3F4LORvDhcooWgAuUMxsT1X6Rm 9hXNx7Vyl0r8PJf8P20= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for pl
	`pl. 3600 IN DNSKEY ( 256 3 8 AwEAAZ4pYZ/A70iVDj4A6YN/FBMF+zT0sn88Sf3j0yP6mrQEMuejxwhp8QFW46qukeOqTv2lAcc7 f4QXQAvqU4KQkjv7Y2P+u7UVc9SIT9f02gIuLXHLYzyMORLsiWqT/761UZVTkOVP8UCWCtzqALQ2 v+u3MfnoO/zszU1YJnqhrG0l ) ; Key ID = 44893`
	`pl. 3600 IN DNSKEY ( 256 3 8 AwEAAeLSzetSIY7jdaHJZZhLP9B9D4wGhoTWFQTanDQAIqyeubgprEgU9+dGNcOFbBVMJe191Y4j p9fOvV9KHMpbjNfARZ4ZLGqRXvEUyWWelqbKNAIpQch7gf6aidgWZiYyy8hkAYcoimmdeSr3g1pS mfSbXV9C2wEQUA8WjtLoqzZJ ) ; Key ID = 39205`
	`pl. 3600 IN DNSKEY ( 257 3 8 AwEAAYakPOFjg+Kxc77WCi7o+BkzZvBqEunzXdJwwRg0By4dt5XDwioocQpTJo2hRaqfp5Ee6NjG iQ2nB8y7CY2IW/8Chuz1jZaD/rd6LXwUwmdGkFX3Te+cY40OI1k1/T06IK9IV9Lc9WwosMEwig0U 5JGGGdzSotD3d3zvouuRVAbS2Tyq6bW6UqyM5Lc2km5YSKsEFlOKZjGJnTpckD0xHO9Y0DNkvvrl hX2C7QXG3W7H4ffS4kJjT3RRcMOpM2AcwsG1JQx/aOnZSx8dvWyEgw5WBP4WWm4ihuAT7U6d301O CVppPvbZwjKpXKo6Q3yjmDLWwJL9ovTz5SJGXN9mpBs= ) ; Key ID = 25412`
	DNSKEY=25412/SEP is now in the chain-of-trust
	DS=25412/SHA-256 verifies DNSKEY=25412/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190619120000 20190520120000 25412 pl. hWQ34kMHY9VYH8mXCQ0j+yn981THeNyc4iaOleBgudlja9+0hVyDhHlS/m44Q4EJCxJSgZqiltgZ s2LTZcj4pym4n+sGVKZ5IO12TS+dwsl5o7vjNKHzbhT5JqZefjAjg9rYUPlH5OnH2igdIo783TZD RZpzQMQcxOD52zHtvCzJs9KwBnn4Zhr0rSuhFPEK9MmEEWgQv68KaWPglwoTa2AaKosabDgPlh/X npQ6uLJJH2UiV6LC/cer8LOSzWEAz1gKmYB9xP0lHo1lp/u3Wf7Gm1CUfKq7tboRpmKxoMKbK9bI k96IGldIZNrwe8+UBfYwe2gO6u4oYyNY5QimtQ== )`
	`pl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190619120000 20190520120000 39205 pl. ZZqcaw62W+PGw77UD5cntCKR/rsRFO/4wqhB2hv13WG9UemBcbOWQ1cTg1YXzxIrHOeG3Pw94U4C HRmYPn+AXWjEXwVY3MrgvjpskGwT0slLOVOFDYgyrcqYxtURAh3F4LORvDhcooWgAuUMxsT1X6Rm 9hXNx7Vyl0r8PJf8P20= )`
	RRSIG=25412 and DNSKEY=25412/SEP verifies the DNSKEY RRset
	RRSIG=39205 and DNSKEY=39205 verifies the DNSKEY RRset
	DNSKEY=44893 is now in the chain-of-trust
	DNSKEY=39205 is now in the chain-of-trust
	Query to b-dns.pl for dnscrypt.pl/A
	Error querying b-dns.pl/2001:7f9:c:0:0:0:0:53 for dnscrypt.pl/A: 'IPv6 transport disabled'
	Received 535 bytes from 192.195.72.53
	;; Answer received from 192.195.72.53 (535 bytes) ;; HEADER SECTION ;; id = 19992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dnscrypt.pl. 86400 IN NS fns1.42.pl. dnscrypt.pl. 86400 IN NS fns2.42.pl. dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190619120000 20190520120000 39205 pl. tWRdYVGBw5GlImgmLOFnaBgpnaBweK1LC/6LWegV4E6BN6+hzcLRnH62r54vvAuQAnSIgAaM0iFH NpK+JSvbqhq+qhu4+xOeqR0CQxzmGzCHiBXXi9kOB1XBidKPg6Z4czhRPHAjeG3VwxK09Yohd/Qx QtUnTHOHI5T8whGpf6c= ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i-dns.pl for dnscrypt.pl/DNSKEY
	Received 535 bytes from 156.154.100.15
	;; Answer received from 156.154.100.15 (535 bytes) ;; HEADER SECTION ;; id = 41401 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dnscrypt.pl. 86400 IN NS fns2.42.pl. dnscrypt.pl. 86400 IN NS fns1.42.pl. dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190619120000 20190520120000 39205 pl. tWRdYVGBw5GlImgmLOFnaBgpnaBweK1LC/6LWegV4E6BN6+hzcLRnH62r54vvAuQAnSIgAaM0iFH NpK+JSvbqhq+qhu4+xOeqR0CQxzmGzCHiBXXi9kOB1XBidKPg6Z4czhRPHAjeG3VwxK09Yohd/Qx QtUnTHOHI5T8whGpf6c= ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnscrypt.pl

dnscrypt.pl

	Checking DS between pl and dnscrypt.pl
	Query to i-dns.pl for dnscrypt.pl/DS
	Received 434 bytes from 156.154.100.15
	;; Answer received from 156.154.100.15 (434 bytes) ;; HEADER SECTION ;; id = 22776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DS ;; ANSWER SECTION (6 records) dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c ) dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 ) dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 ) dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad ) dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190619120000 20190520120000 39205 pl. tWRdYVGBw5GlImgmLOFnaBgpnaBweK1LC/6LWegV4E6BN6+hzcLRnH62r54vvAuQAnSIgAaM0iFH NpK+JSvbqhq+qhu4+xOeqR0CQxzmGzCHiBXXi9kOB1XBidKPg6Z4czhRPHAjeG3VwxK09Yohd/Qx QtUnTHOHI5T8whGpf6c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DS records for dnscrypt.pl in the pl zone
	DS=55059/SHA-256 has algorithm ECDSAP256SHA256
	DS=65416/SHA-1 has algorithm RSASHA1
	DS=55059/SHA-384 has algorithm ECDSAP256SHA256
	DS=55059/SHA-1 has algorithm ECDSAP256SHA256
	DS=65416/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`dnscrypt.pl. 86400 IN RRSIG ( DS 8 2 86400 20190619120000 20190520120000 39205 pl. tWRdYVGBw5GlImgmLOFnaBgpnaBweK1LC/6LWegV4E6BN6+hzcLRnH62r54vvAuQAnSIgAaM0iFH NpK+JSvbqhq+qhu4+xOeqR0CQxzmGzCHiBXXi9kOB1XBidKPg6Z4czhRPHAjeG3VwxK09Yohd/Qx QtUnTHOHI5T8whGpf6c= )`
	RRSIG=39205 and DNSKEY=39205 verifies the DS RRset
	DS=55059/SHA-256 is now in the chain-of-trust
	DS=65416/SHA-1 is now in the chain-of-trust
	`dnscrypt.pl. 86400 IN DS ( 55059 13 2 f41e10e15caf34d59394822d07e735e8aa17fa3e1a7eca6f4ca0d73dbabadf0c )`
	`dnscrypt.pl. 86400 IN DS 65416 5 1 b229de3bdea9ef6799b4efd49b1416fc36b2b9fa`
	`dnscrypt.pl. 86400 IN DS ( 55059 13 4 d491aebb13a5be8249c80439028926b3dae58cfdf127dbe0b70691ac52d040aa 3b20da64468260f6d17a034e6b8f39d8 )`
	`dnscrypt.pl. 86400 IN DS ( 55059 13 1 cf19a7caec38db3d271b532967e8e56d8c02e866 )`
	`dnscrypt.pl. 86400 IN DS ( 65416 5 2 e5663dbb1d8c40e44ede27ca6d48985798925470a5a85a9c4f89743e79fd43ad )`
	Query to fns2.42.pl for dnscrypt.pl/DNSKEY
	Error querying fns2.42.pl/2001:41d0:1000:2ada:0:0:0:42 for dnscrypt.pl/DNSKEY: 'IPv6 transport disabled'
	Received 1753 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1753 bytes) ;; HEADER SECTION ;; id = 40533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 9 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN DNSKEY ;; ANSWER SECTION (9 records) dnscrypt.pl. 86400 IN DNSKEY ( 257 3 5 AwEAAb0nuyrN1aAFcXiXoPl1SRNTFLAHRmkAmroyPyFYsKpTVEvJ0h8GvOVk3ZdDgP6ZxzJxCTga YWJTrei8gov/ymNiAkGxhQVdVFsqPuztXTNpycNY4BSqlZm2yS/Tf3P+Ak5Ou++D8NYryYxvoAO0 W9xi2qApZ9KSLKBNyO0XbFy5akztuCZZv/ljJpLbitPu/SWOClotdaCR3rX6sHQt1uj7MbT/PFha +niiRctYAOsqfBhvmsDpeHydFKCQRCY288yvE+ZYCBwPM1B9shJRhsJoWIUuHeBVlYd4lANu1yYN wWYDTJ60IJb+DSK2jC11fR4htRAZRciJzS3RUP9aC8U= ) ; Key ID = 65416 dnscrypt.pl. 86400 IN DNSKEY ( 257 3 7 AwEAAadDftarD59ThGhwgKsFxDeoK0tOMqw7eF1GTyP6o91FXMTDe5JGBk02tTNsjXYXRp45r8r1 +hYWxlhAhn7M7i7A80AFMjtgjJXaD+XIMFEYVrN2u9JCcSXudl35stEA2DdvWgXHWCaEcsuFbsp3 w9Sda2p0f1EC5VWXpbxlY374iDrmUkPyapvo95Et1Ju5iN9IWJ9jyCxGetqCqlGJQ9Ft2WIgDE9F SORY+gXT1TXXBXT2Qnuy1w45T+o04KI0YjYnErvpj7RYf2tJOFJ8UPh9sErQwv624v56Nsrxp805 cTtqa2txSbbn1hAqwAf0C/xitkJ7eP8BbH6B79UtJOc= ) ; Key ID = 5991 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 5 AwEAAaxQ3TNqP2t2a3Xud8jaxlz9j6VZCb8X2FIeP6lw1vWOKJeYz4lbn+Z06SVKqOkv4bhrn0gj Uj/IYQucCRdgMLnONqf3wE6MKZpV38EqAFzSejwhIz8z1d2L77vwjltoqDDBvzWVXh/rsBz8Vfqo AQJdm1ZbX4MjJEnpCrdIZMjT ) ; Key ID = 1651 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 13 sm96Lx1jdi5iHD9ekAU/wSNV0q98ld9jc+cxQWyiz9leH9KG5qLtP5xR4yGF6SJKC+zrWdIOXE+M CCgq+MxyYA== ) ; Key ID = 55894 dnscrypt.pl. 86400 IN DNSKEY ( 257 3 13 QzLzER8zqj1erIGmNMsveASyDGRMeeHRAH7MMW0hlKUCVhuNSQQtBgaD6O9rzGcuwfo88wLK21+T ZB6th6wTsQ== ) ; Key ID = 55059 dnscrypt.pl. 86400 IN DNSKEY ( 256 3 7 AwEAAdt2f8TLF/co9/Ofpl7gBIycr86nFCDvms+axcVg4WhQxvpndQ0H7D51OEuIA6gRKKSgf0G3 qzW6B8Uk2ZfcCDaQu/Ah89VeG9IsYNtw2xWvBJ1H+XZZ/Ir8s2qndZTcqyDy6qdVawaGzpf5NlhA kTGgVbiu9XmzJi87NA4/a3v7 ) ; Key ID = 1802 dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 5 2 86400 20190531113911 20190517113911 65416 dnscrypt.pl. KRMw+4NhJSGTRe0gqeTMNx+6vKfH2dovD2HNRFcTuRkP7UhnzjrkxtyB73PS5vkNZkfTgPkNT2La 823j6zouze4eQFH/hE4uI9Cnf++nxDoeNohBX2/PrqMcCXS7w7yrWYhoqGPJAguugCEXxqAh+E8r f/qMRX4YclEobhUurPRlLPjM7OQBpXdkGzf66vuxbGnaVPkG0q/Hy4m+zx2lyQ96o9+5HQXfHetX jMbO5rN1Ip4TfxHnw/ubhtKA3LS51X5zoT8R+/m3BnoO3oNizmcXzYCCcBwBk3pFhZ5ruS/OMAdr 7ufmCWszTfkW+4UK9s7Pj55lA3NHAl+z0MQtsA== ) dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190531113911 20190517113911 5991 dnscrypt.pl. pPyEO8X/5XXhZ7KGLSVyBZyyZ1rJpQ05fxjKLcLGMnuwueb2vlWkgsZ+Qkyp85/KBNrkU9dYUiJZ 9Tk378uBvC6QSRJkfctjkGdJO1r1rJnymAcBgWgAlq6yLCNRAF+NhVYL+IMrpqfmCBFohoc9cQnm avvd36R18oXqHNdnCqv++qdHkNSdNSj+t75TI/WpyAkFADoBa5dGaIHayHK3Z7JCQEknJlEFPPxH DqAr1qjtUNZB723r+vli2JXdOpR6r2hEDmH7OayidlLQRqydCekxwP/iv1owi4pk2UQ+8JQCf469 w0d0YjPrQULhg4i4PGo3IQ1awu4sS3u+WcrYNA== ) dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20190531113911 20190517113911 55059 dnscrypt.pl. BXW0zw7C0dHkOVdFADz2ijtFc7YAeyXVrZUh8RYZdw6M8Y1/Mc+P3eDQ3yjK5TbSMA42nIBotTam pJE04wtVgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 6 DNSKEY records for dnscrypt.pl
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 5 AwEAAb0nuyrN1aAFcXiXoPl1SRNTFLAHRmkAmroyPyFYsKpTVEvJ0h8GvOVk3ZdDgP6ZxzJxCTga YWJTrei8gov/ymNiAkGxhQVdVFsqPuztXTNpycNY4BSqlZm2yS/Tf3P+Ak5Ou++D8NYryYxvoAO0 W9xi2qApZ9KSLKBNyO0XbFy5akztuCZZv/ljJpLbitPu/SWOClotdaCR3rX6sHQt1uj7MbT/PFha +niiRctYAOsqfBhvmsDpeHydFKCQRCY288yvE+ZYCBwPM1B9shJRhsJoWIUuHeBVlYd4lANu1yYN wWYDTJ60IJb+DSK2jC11fR4htRAZRciJzS3RUP9aC8U= ) ; Key ID = 65416`
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 7 AwEAAadDftarD59ThGhwgKsFxDeoK0tOMqw7eF1GTyP6o91FXMTDe5JGBk02tTNsjXYXRp45r8r1 +hYWxlhAhn7M7i7A80AFMjtgjJXaD+XIMFEYVrN2u9JCcSXudl35stEA2DdvWgXHWCaEcsuFbsp3 w9Sda2p0f1EC5VWXpbxlY374iDrmUkPyapvo95Et1Ju5iN9IWJ9jyCxGetqCqlGJQ9Ft2WIgDE9F SORY+gXT1TXXBXT2Qnuy1w45T+o04KI0YjYnErvpj7RYf2tJOFJ8UPh9sErQwv624v56Nsrxp805 cTtqa2txSbbn1hAqwAf0C/xitkJ7eP8BbH6B79UtJOc= ) ; Key ID = 5991`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 5 AwEAAaxQ3TNqP2t2a3Xud8jaxlz9j6VZCb8X2FIeP6lw1vWOKJeYz4lbn+Z06SVKqOkv4bhrn0gj Uj/IYQucCRdgMLnONqf3wE6MKZpV38EqAFzSejwhIz8z1d2L77vwjltoqDDBvzWVXh/rsBz8Vfqo AQJdm1ZbX4MjJEnpCrdIZMjT ) ; Key ID = 1651`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 13 sm96Lx1jdi5iHD9ekAU/wSNV0q98ld9jc+cxQWyiz9leH9KG5qLtP5xR4yGF6SJKC+zrWdIOXE+M CCgq+MxyYA== ) ; Key ID = 55894`
	`dnscrypt.pl. 86400 IN DNSKEY ( 257 3 13 QzLzER8zqj1erIGmNMsveASyDGRMeeHRAH7MMW0hlKUCVhuNSQQtBgaD6O9rzGcuwfo88wLK21+T ZB6th6wTsQ== ) ; Key ID = 55059`
	`dnscrypt.pl. 86400 IN DNSKEY ( 256 3 7 AwEAAdt2f8TLF/co9/Ofpl7gBIycr86nFCDvms+axcVg4WhQxvpndQ0H7D51OEuIA6gRKKSgf0G3 qzW6B8Uk2ZfcCDaQu/Ah89VeG9IsYNtw2xWvBJ1H+XZZ/Ir8s2qndZTcqyDy6qdVawaGzpf5NlhA kTGgVbiu9XmzJi87NA4/a3v7 ) ; Key ID = 1802`
	DNSKEY=65416/SEP is now in the chain-of-trust
	DS=65416/SHA-1 verifies DNSKEY=65416/SEP
	DS=65416/SHA-256 verifies DNSKEY=65416/SEP
	DNSKEY=55059/SEP is now in the chain-of-trust
	DS=55059/SHA-256 verifies DNSKEY=55059/SEP
	DS=55059/SHA-384 verifies DNSKEY=55059/SEP
	DS=55059/SHA-1 verifies DNSKEY=55059/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 5 2 86400 20190531113911 20190517113911 65416 dnscrypt.pl. KRMw+4NhJSGTRe0gqeTMNx+6vKfH2dovD2HNRFcTuRkP7UhnzjrkxtyB73PS5vkNZkfTgPkNT2La 823j6zouze4eQFH/hE4uI9Cnf++nxDoeNohBX2/PrqMcCXS7w7yrWYhoqGPJAguugCEXxqAh+E8r f/qMRX4YclEobhUurPRlLPjM7OQBpXdkGzf66vuxbGnaVPkG0q/Hy4m+zx2lyQ96o9+5HQXfHetX jMbO5rN1Ip4TfxHnw/ubhtKA3LS51X5zoT8R+/m3BnoO3oNizmcXzYCCcBwBk3pFhZ5ruS/OMAdr 7ufmCWszTfkW+4UK9s7Pj55lA3NHAl+z0MQtsA== )`
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 7 2 86400 20190531113911 20190517113911 5991 dnscrypt.pl. pPyEO8X/5XXhZ7KGLSVyBZyyZ1rJpQ05fxjKLcLGMnuwueb2vlWkgsZ+Qkyp85/KBNrkU9dYUiJZ 9Tk378uBvC6QSRJkfctjkGdJO1r1rJnymAcBgWgAlq6yLCNRAF+NhVYL+IMrpqfmCBFohoc9cQnm avvd36R18oXqHNdnCqv++qdHkNSdNSj+t75TI/WpyAkFADoBa5dGaIHayHK3Z7JCQEknJlEFPPxH DqAr1qjtUNZB723r+vli2JXdOpR6r2hEDmH7OayidlLQRqydCekxwP/iv1owi4pk2UQ+8JQCf469 w0d0YjPrQULhg4i4PGo3IQ1awu4sS3u+WcrYNA== )`
	`dnscrypt.pl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20190531113911 20190517113911 55059 dnscrypt.pl. BXW0zw7C0dHkOVdFADz2ijtFc7YAeyXVrZUh8RYZdw6M8Y1/Mc+P3eDQ3yjK5TbSMA42nIBotTam pJE04wtVgw== )`
	RRSIG=65416 and DNSKEY=65416/SEP verifies the DNSKEY RRset
	RRSIG=5991 and DNSKEY=5991/SEP verifies the DNSKEY RRset
	RRSIG=55059 and DNSKEY=55059/SEP verifies the DNSKEY RRset
	DNSKEY=5991/SEP is now in the chain-of-trust
	DNSKEY=1651 is now in the chain-of-trust
	DNSKEY=55894 is now in the chain-of-trust
	DNSKEY=1802 is now in the chain-of-trust
	Query to fns2.42.pl for dnscrypt.pl/A
	Error querying fns2.42.pl/2001:41d0:1000:2ada:0:0:0:42 for dnscrypt.pl/A: 'IPv6 transport disabled'
	Received 1055 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1055 bytes) ;; HEADER SECTION ;; id = 46485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN A 178.62.233.48 dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190531113911 20190517113911 1651 dnscrypt.pl. IPVhVWUagYYeuP7cn/eUmLje1/U07t5UPDwWlDwrzy1aH2tOSEbWJ7tx9lOrjHj2+Cm0KQNA2NGI /fDULntJV1CuO/oQzvwLW88KufBWX8oH5XSFf0BWzcGQMcqP3vxQ8OGiq1IPoKeR6DCTSOoZqpSl MxMIAJ7ERvBVpf0FncM= ) dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190531113911 20190517113911 1802 dnscrypt.pl. qerY3kj8UJGnFFD2lAzPfIE2e682uIHwIN76/T+muXQ7DcD15Za14rLiNGs7eyEqiTqgx2ASdsoJ pg5qY9BywGAZR4P2duRxiEEQjeA9jnFMV+4jI4UdNtTusDBZrJVD9luWKtXBxbyToILqaU5CQRjT ORS0yn8kRLpW/GTZ6tQ= ) dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190531113911 20190517113911 55894 dnscrypt.pl. CIVlWcyejXKSHbos3mGwpLufUzsN3f3HTI3fDk6xY9Qy9qkv09+g9lqq54CTu/pyHSxgAlJLjoDQ aSthiMIzIg== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190531113911 20190517113911 1651 dnscrypt.pl. T8Nuq6IYXtE9r04EsRXsPY7hBWi5n3RaRMr8STaXPGcfMQjW2cShcZ1NL/5puTafe0l966vu4mD6 GZx02u6I8ZLp2wtUNqTWpJR0lNUEdv7clWf0nHw+eBPlcPXp7cb+UjsaJ3KfxMlK59j8L3SqyyE9 gP+TnexqJqhqnvCIhj8= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190531113911 20190517113911 1802 dnscrypt.pl. W/LU5oy25EsdVCfeDIlQNKLWtt1CWFhG2YLAOgTPl9Rl0o4UUMlsDVZlAmMVzvx9Xsuv5tVgjkh9 m/4u0+PA/IzfBMatoRpuhnSWRe7Qd9ifPSj3OW6kJnFyFjz2Xe7EGwT8yC9gOJukN3qgHlg69lF4 Pa5RebsoPUQGLhcjJbE= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190531113911 20190517113911 55894 dnscrypt.pl. rJQAfFuVHX8cqOREBQvauSmaq93Eeu1yYjB8qqxb1DDLTKS50dfUnx7HUFJCt07YvQpnPlQnBymG bjlSz9piaw== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnscrypt.pl is authoritative for dnscrypt.pl
	Found RRSIG signed by dnscrypt.pl zone
	Query to fns1.42.pl for dnscrypt.pl/SOA
	Received 1097 bytes from 79.98.145.34
	;; Answer received from 79.98.145.34 (1097 bytes) ;; HEADER SECTION ;; id = 8545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN SOA ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN SOA ( fns1.42.pl. dnscrypt.soltysiak.com. 2019051004 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) dnscrypt.pl. 86400 IN RRSIG ( SOA 5 2 86400 20190531113911 20190517113911 1651 dnscrypt.pl. h4wgtB5VIn+IX7mfeuRd9D4caF7IOZwDfrSJI5V89222gHIWea+GGKcfOKWrpxxzWmQmPrBS7vR/ wAmzeS6hkz1SuCROgxlRtCk0HPB40j3du5/PljQLo3fksfrhJp4Y0UPoiKKq6wHulGcHsmQfNJFT zhx0v0AUdh4sn12lXJw= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 7 2 86400 20190531113911 20190517113911 1802 dnscrypt.pl. 1OfSz9jy07DU2fyMqPKa06PhuLquICy/rYj5gePhCiIO2svUD2V8SeeFhlMV/8eVXP+YdTZhe/pc ozeGUeuxAqr7AeguFq0/u64CSyt5DmjgTaHHV6t06mGLEiS1swabAaM34RcaXRP53MbU0wesdifR R0apExhNZJR6RsZdrlQ= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 13 2 86400 20190531113911 20190517113911 55894 dnscrypt.pl. FgT/7vx0AcOZHY4bsT1rTJxLOsi4CM++276YUXN84CNF95FyOWr/BNeRdVTnzVs98SKflZN7xRnN X2bP9ToKxQ== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190531113911 20190517113911 1651 dnscrypt.pl. T8Nuq6IYXtE9r04EsRXsPY7hBWi5n3RaRMr8STaXPGcfMQjW2cShcZ1NL/5puTafe0l966vu4mD6 GZx02u6I8ZLp2wtUNqTWpJR0lNUEdv7clWf0nHw+eBPlcPXp7cb+UjsaJ3KfxMlK59j8L3SqyyE9 gP+TnexqJqhqnvCIhj8= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190531113911 20190517113911 1802 dnscrypt.pl. W/LU5oy25EsdVCfeDIlQNKLWtt1CWFhG2YLAOgTPl9Rl0o4UUMlsDVZlAmMVzvx9Xsuv5tVgjkh9 m/4u0+PA/IzfBMatoRpuhnSWRe7Qd9ifPSj3OW6kJnFyFjz2Xe7EGwT8yC9gOJukN3qgHlg69lF4 Pa5RebsoPUQGLhcjJbE= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190531113911 20190517113911 55894 dnscrypt.pl. rJQAfFuVHX8cqOREBQvauSmaq93Eeu1yYjB8qqxb1DDLTKS50dfUnx7HUFJCt07YvQpnPlQnBymG bjlSz9piaw== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fns2.42.pl for dnscrypt.pl/SOA
	Received 1097 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1097 bytes) ;; HEADER SECTION ;; id = 8236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN SOA ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN SOA ( fns1.42.pl. dnscrypt.soltysiak.com. 2019051004 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 3600 ;minimum ) dnscrypt.pl. 86400 IN RRSIG ( SOA 5 2 86400 20190531113911 20190517113911 1651 dnscrypt.pl. h4wgtB5VIn+IX7mfeuRd9D4caF7IOZwDfrSJI5V89222gHIWea+GGKcfOKWrpxxzWmQmPrBS7vR/ wAmzeS6hkz1SuCROgxlRtCk0HPB40j3du5/PljQLo3fksfrhJp4Y0UPoiKKq6wHulGcHsmQfNJFT zhx0v0AUdh4sn12lXJw= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 7 2 86400 20190531113911 20190517113911 1802 dnscrypt.pl. 1OfSz9jy07DU2fyMqPKa06PhuLquICy/rYj5gePhCiIO2svUD2V8SeeFhlMV/8eVXP+YdTZhe/pc ozeGUeuxAqr7AeguFq0/u64CSyt5DmjgTaHHV6t06mGLEiS1swabAaM34RcaXRP53MbU0wesdifR R0apExhNZJR6RsZdrlQ= ) dnscrypt.pl. 86400 IN RRSIG ( SOA 13 2 86400 20190531113911 20190517113911 55894 dnscrypt.pl. FgT/7vx0AcOZHY4bsT1rTJxLOsi4CM++276YUXN84CNF95FyOWr/BNeRdVTnzVs98SKflZN7xRnN X2bP9ToKxQ== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190531113911 20190517113911 1651 dnscrypt.pl. T8Nuq6IYXtE9r04EsRXsPY7hBWi5n3RaRMr8STaXPGcfMQjW2cShcZ1NL/5puTafe0l966vu4mD6 GZx02u6I8ZLp2wtUNqTWpJR0lNUEdv7clWf0nHw+eBPlcPXp7cb+UjsaJ3KfxMlK59j8L3SqyyE9 gP+TnexqJqhqnvCIhj8= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190531113911 20190517113911 1802 dnscrypt.pl. W/LU5oy25EsdVCfeDIlQNKLWtt1CWFhG2YLAOgTPl9Rl0o4UUMlsDVZlAmMVzvx9Xsuv5tVgjkh9 m/4u0+PA/IzfBMatoRpuhnSWRe7Qd9ifPSj3OW6kJnFyFjz2Xe7EGwT8yC9gOJukN3qgHlg69lF4 Pa5RebsoPUQGLhcjJbE= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190531113911 20190517113911 55894 dnscrypt.pl. rJQAfFuVHX8cqOREBQvauSmaq93Eeu1yYjB8qqxb1DDLTKS50dfUnx7HUFJCt07YvQpnPlQnBymG bjlSz9piaw== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to fns2.42.pl for dnscrypt.pl/A
	Error querying fns2.42.pl/2001:41d0:1000:2ada:0:0:0:42 for dnscrypt.pl/A: 'IPv6 transport disabled'
	Received 1055 bytes from 193.70.13.218
	;; Answer received from 193.70.13.218 (1055 bytes) ;; HEADER SECTION ;; id = 43381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnscrypt.pl. IN A ;; ANSWER SECTION (4 records) dnscrypt.pl. 86400 IN A 178.62.233.48 dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190531113911 20190517113911 1651 dnscrypt.pl. IPVhVWUagYYeuP7cn/eUmLje1/U07t5UPDwWlDwrzy1aH2tOSEbWJ7tx9lOrjHj2+Cm0KQNA2NGI /fDULntJV1CuO/oQzvwLW88KufBWX8oH5XSFf0BWzcGQMcqP3vxQ8OGiq1IPoKeR6DCTSOoZqpSl MxMIAJ7ERvBVpf0FncM= ) dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190531113911 20190517113911 1802 dnscrypt.pl. qerY3kj8UJGnFFD2lAzPfIE2e682uIHwIN76/T+muXQ7DcD15Za14rLiNGs7eyEqiTqgx2ASdsoJ pg5qY9BywGAZR4P2duRxiEEQjeA9jnFMV+4jI4UdNtTusDBZrJVD9luWKtXBxbyToILqaU5CQRjT ORS0yn8kRLpW/GTZ6tQ= ) dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190531113911 20190517113911 55894 dnscrypt.pl. CIVlWcyejXKSHbos3mGwpLufUzsN3f3HTI3fDk6xY9Qy9qkv09+g9lqq54CTu/pyHSxgAlJLjoDQ aSthiMIzIg== ) ;; AUTHORITY SECTION (5 records) dnscrypt.pl. 172800 IN NS fns1.42.pl. dnscrypt.pl. 172800 IN NS fns2.42.pl. dnscrypt.pl. 172800 IN RRSIG ( NS 5 2 172800 20190531113911 20190517113911 1651 dnscrypt.pl. T8Nuq6IYXtE9r04EsRXsPY7hBWi5n3RaRMr8STaXPGcfMQjW2cShcZ1NL/5puTafe0l966vu4mD6 GZx02u6I8ZLp2wtUNqTWpJR0lNUEdv7clWf0nHw+eBPlcPXp7cb+UjsaJ3KfxMlK59j8L3SqyyE9 gP+TnexqJqhqnvCIhj8= ) dnscrypt.pl. 172800 IN RRSIG ( NS 7 2 172800 20190531113911 20190517113911 1802 dnscrypt.pl. W/LU5oy25EsdVCfeDIlQNKLWtt1CWFhG2YLAOgTPl9Rl0o4UUMlsDVZlAmMVzvx9Xsuv5tVgjkh9 m/4u0+PA/IzfBMatoRpuhnSWRe7Qd9ifPSj3OW6kJnFyFjz2Xe7EGwT8yC9gOJukN3qgHlg69lF4 Pa5RebsoPUQGLhcjJbE= ) dnscrypt.pl. 172800 IN RRSIG ( NS 13 2 172800 20190531113911 20190517113911 55894 dnscrypt.pl. rJQAfFuVHX8cqOREBQvauSmaq93Eeu1yYjB8qqxb1DDLTKS50dfUnx7HUFJCt07YvQpnPlQnBymG bjlSz9piaw== ) ;; ADDITIONAL SECTION (4 records) fns1.42.pl. 86400 IN A 79.98.145.34 fns2.42.pl. 86400 IN A 193.70.13.218 fns2.42.pl. 86400 IN AAAA 2001:41d0:1000:2ada::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnscrypt.pl A RR has value 178.62.233.48
	Found 3 RRSIGs over A RRset
	`dnscrypt.pl. 86400 IN RRSIG ( A 5 2 86400 20190531113911 20190517113911 1651 dnscrypt.pl. IPVhVWUagYYeuP7cn/eUmLje1/U07t5UPDwWlDwrzy1aH2tOSEbWJ7tx9lOrjHj2+Cm0KQNA2NGI /fDULntJV1CuO/oQzvwLW88KufBWX8oH5XSFf0BWzcGQMcqP3vxQ8OGiq1IPoKeR6DCTSOoZqpSl MxMIAJ7ERvBVpf0FncM= )`
	`dnscrypt.pl. 86400 IN RRSIG ( A 7 2 86400 20190531113911 20190517113911 1802 dnscrypt.pl. qerY3kj8UJGnFFD2lAzPfIE2e682uIHwIN76/T+muXQ7DcD15Za14rLiNGs7eyEqiTqgx2ASdsoJ pg5qY9BywGAZR4P2duRxiEEQjeA9jnFMV+4jI4UdNtTusDBZrJVD9luWKtXBxbyToILqaU5CQRjT ORS0yn8kRLpW/GTZ6tQ= )`
	`dnscrypt.pl. 86400 IN RRSIG ( A 13 2 86400 20190531113911 20190517113911 55894 dnscrypt.pl. CIVlWcyejXKSHbos3mGwpLufUzsN3f3HTI3fDk6xY9Qy9qkv09+g9lqq54CTu/pyHSxgAlJLjoDQ aSthiMIzIg== )`
	RRSIG=1651 and DNSKEY=1651 verifies the A RRset
	RRSIG=1802 and DNSKEY=1802 verifies the A RRset
	RRSIG=55894 and DNSKEY=55894 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnscrypt.pl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: